
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149905/394D064A1D9B11E2BE12EF8808B02CD2/y7aOmQU8HeJHirvi3_KrzsDRsUg.mft
File: y7aOmQU8HeJHirvi3_KrzsDRsUg.mft (raw, json)
Hash identifier: zNtzhLG1XlhBCHpB+eX/7tnlQYm7hr5zz/CS3Y2/dM8=
Subject key identifier: D4:94:8A:36:E0:89:14:A6:53:B3:5C:4C:5F:9E:DB:8C:36:96:BC:6F
Authority key identifier: CB:B6:8E:99:05:3C:1D:E2:47:8A:BB:E2:DF:F2:AB:CE:C0:D1:B1:48
Certificate issuer: /CN=A9149905/serialNumber=CBB68E99053C1DE2478ABBE2DFF2ABCEC0D1B148
Certificate serial: 3547
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7aOmQU8HeJHirvi3_KrzsDRsUg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149905/394D064A1D9B11E2BE12EF8808B02CD2/y7aOmQU8HeJHirvi3_KrzsDRsUg.mft
Manifest number: 353E
Signing time: Fri 08 May 2026 14:55:54 +0000
Manifest this update: Fri 08 May 2026 14:55:54 +0000
Manifest next update: Fri 15 May 2026 14:55:54 +0000
Files and hashes: 1: y7aOmQU8HeJHirvi3_KrzsDRsUg.crl (hash: brLqXUTfbp6Nv2vhl/LyCSX1Lq+cnNRO0MU3AFNXZMw=)
2: A6D6CA7E022C11EBAC47A831C4F9AE02.roa (hash: k15XvHBFTQxYQednyHDCk4s/WtIgkfY4gwfxlATMUsU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9149905/394D064A1D9B11E2BE12EF8808B02CD2/y7aOmQU8HeJHirvi3_KrzsDRsUg.crl
rsync://rpki.apnic.net/member_repository/A9149905/394D064A1D9B11E2BE12EF8808B02CD2/y7aOmQU8HeJHirvi3_KrzsDRsUg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7aOmQU8HeJHirvi3_KrzsDRsUg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 15 May 2026 14:55:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13639 (0x3547)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149905, serialNumber=CBB68E99053C1DE2478ABBE2DFF2ABCEC0D1B148
Validity
Not Before: May 8 14:55:54 2026 GMT
Not After : May 15 14:55:54 2026 GMT
Subject: CN=69fdf97a-fa35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:88:f7:29:0c:a1:b5:7a:ce:32:5e:9a:51:71:
c2:46:93:3f:05:65:31:14:ce:fc:4e:b4:5b:33:60:
4c:63:a0:bc:ab:af:06:48:2b:06:98:ca:44:db:e3:
e0:fe:18:3c:5e:a0:16:c4:a7:27:00:30:6c:e7:9f:
9e:2a:8f:84:be:1f:33:be:3e:00:f0:c5:1b:c7:da:
47:4c:7f:0e:76:e7:1e:7e:f2:70:c8:46:d0:92:4b:
d3:34:b7:ca:c5:9e:02:82:f3:46:4a:37:73:51:4a:
9b:50:b3:27:89:4e:96:c5:82:7e:73:60:22:b7:a8:
30:66:cc:62:94:c3:1f:9e:9d:42:80:34:33:fc:2a:
72:d6:da:65:f0:a8:2b:a8:25:1a:44:4f:ce:6d:d0:
a5:0b:e8:c2:4b:47:70:6b:3a:bc:45:27:cf:8e:b6:
97:c1:7c:b9:5e:c9:46:66:25:e5:5f:bd:f9:ae:a3:
07:36:d7:7a:be:b1:71:18:90:82:15:51:b3:e5:74:
51:db:37:0e:49:a8:33:75:f3:bd:35:14:bb:10:41:
27:24:d9:85:c4:ab:43:b1:dd:f3:9c:d6:ce:0e:48:
2b:b0:f3:e5:10:bb:a8:63:06:75:00:fd:ad:68:a0:
ff:fb:d1:18:36:55:79:dc:40:ea:d0:ec:2f:d4:e4:
28:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:94:8A:36:E0:89:14:A6:53:B3:5C:4C:5F:9E:DB:8C:36:96:BC:6F
X509v3 Authority Key Identifier:
keyid:CB:B6:8E:99:05:3C:1D:E2:47:8A:BB:E2:DF:F2:AB:CE:C0:D1:B1:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149905/394D064A1D9B11E2BE12EF8808B02CD2/y7aOmQU8HeJHirvi3_KrzsDRsUg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7aOmQU8HeJHirvi3_KrzsDRsUg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149905/394D064A1D9B11E2BE12EF8808B02CD2/y7aOmQU8HeJHirvi3_KrzsDRsUg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:85:2c:ef:55:36:78:be:a4:5b:1e:f7:31:18:2b:2c:34:d1:
95:59:93:34:92:f3:16:81:50:c9:57:78:d0:d7:39:20:1d:56:
c8:94:53:af:b5:3b:ab:a4:2d:5c:67:a2:1d:d2:36:41:b4:64:
a3:22:7f:36:6a:b3:8e:09:46:2e:51:42:79:88:6e:cf:4e:e0:
79:03:d1:de:33:8a:80:6b:cf:a5:4b:08:33:4f:84:d7:ed:3c:
fd:9a:96:19:bf:3c:8a:97:9a:0a:af:a1:31:d5:59:40:8a:3d:
0e:8c:9c:3c:fd:d2:9d:8e:a8:3f:81:bf:bd:99:94:41:f8:86:
21:d5:7a:4b:72:bc:1c:d4:e8:75:16:99:f6:37:98:03:00:98:
96:36:d4:6e:08:1d:82:c5:87:ce:19:2b:19:29:bf:6f:8f:69:
e1:5b:67:96:5d:91:6d:e8:15:a8:66:79:bc:7e:b4:29:1c:52:
55:f2:73:c4:3f:77:c8:8d:80:89:71:6f:77:a7:3b:73:0a:53:
22:c0:a4:ca:7e:af:95:2f:f5:77:cc:8e:08:6f:0b:b5:e4:96:
d5:38:10:61:ec:f1:a2:2d:80:af:66:b5:5c:44:a6:70:77:1d:
cf:72:c5:b5:55:7a:be:ad:ec:e3:1f:0b:50:dd:0d:a6:42:83:
cc:bf:bc:c7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNUcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDk5MDUxMTAvBgNVBAUTKENCQjY4RTk5MDUzQzFERTI0NzhBQkJFMkRGRjJBQkNF
QzBEMUIxNDgwHhcNMjYwNTA4MTQ1NTU0WhcNMjYwNTE1MTQ1NTU0WjAYMRYwFAYD
VQQDEw02OWZkZjk3YS1mYTM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu4j3KQyhtXrOMl6aUXHCRpM/BWUxFM78TrRbM2BMY6C8q68GSCsGmMpE2+Pg
/hg8XqAWxKcnADBs55+eKo+Evh8zvj4A8MUbx9pHTH8OducefvJwyEbQkkvTNLfK
xZ4CgvNGSjdzUUqbULMniU6WxYJ+c2Ait6gwZsxilMMfnp1CgDQz/Cpy1tpl8Kgr
qCUaRE/ObdClC+jCS0dwazq8RSfPjraXwXy5XslGZiXlX735rqMHNtd6vrFxGJCC
FVGz5XRR2zcOSagzdfO9NRS7EEEnJNmFxKtDsd3znNbODkgrsPPlELuoYwZ1AP2t
aKD/+9EYNlV53EDq0Owv1OQowwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNSUijbg
iRSmU7NcTF+e24w2lrxvMB8GA1UdIwQYMBaAFMu2jpkFPB3iR4q74t/yq87A0bFI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTkwNS8zOTREMDY0QTFE
OUIxMUUyQkUxMkVGODgwOEIwMkNEMi95N2FPbVFVOEhlSkhpcnZpM19LcnpzRFJz
VWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3k3YU9tUVU4SGVKSGlydmkzX0tyenNEUnNVZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
OTkwNS8zOTREMDY0QTFEOUIxMUUyQkUxMkVGODgwOEIwMkNEMi95N2FPbVFVOEhl
SkhpcnZpM19LcnpzRFJzVWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAjIUs71U2eL6kWx73MRgrLDTRlVmTNJLzFoFQyVd40Nc5IB1WyJRTr7U7q6Qt
XGeiHdI2QbRkoyJ/NmqzjglGLlFCeYhuz07geQPR3jOKgGvPpUsIM0+E1+08/ZqW
Gb88ipeaCq+hMdVZQIo9DoycPP3SnY6oP4G/vZmUQfiGIdV6S3K8HNTodRaZ9jeY
AwCYljbUbggdgsWHzhkrGSm/b49p4Vtnll2RbegVqGZ5vH60KRxSVfJzxD93yI2A
iXFvd6c7cwpTIsCkyn6vlS/1d8yOCG8LteSW1TgQYezxoi2Ar2a1XESmcHcdz3LF
tVV6vq3s4x8LUN0NpkKDzL+8xw==
-----END CERTIFICATE-----
Generated at Sat May 9 09:32:52 2026 by rpki-client